General

  • Target

    46a09f301fc8309d277123e5c29f04ffc30f24a7256515d237de45d7aa4ab8db

  • Size

    1.5MB

  • MD5

    71233f24945da96e8d8556c940b68dcd

  • SHA1

    9ec6d4c878a94a2247e6ea75a78f230e7c3d2725

  • SHA256

    46a09f301fc8309d277123e5c29f04ffc30f24a7256515d237de45d7aa4ab8db

  • SHA512

    836dfef583006a448e5ee209fa542e0366aa72a66ab36ac97072eb35a29f02711cda18fccd1ebb19f5969e6eed647d018c5c2cfc159dcbb6e877a3fca50504d7

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727HeoPO+XC7A9GaFu3PzZtvIaWrmRwDOb4rL2RyykgN:ROdWCCi7/rahOYkZtgvrmRUugyBqOJ

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 46a09f301fc8309d277123e5c29f04ffc30f24a7256515d237de45d7aa4ab8db
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections